Login Restrict vs Protect Login

By default WordPress allows unlimited login attempts through the login page but this will lock account after number of login attempts Features Limit the number of login attempts Informs user about remaining attempts or block time on login page Optional logging, optional email notification Handles server behind reverse proxy It is possible to whitelist IPs using a filter. Plugin uses standard actions and filters only.

Out of the box, WordPress allows unlimited attempts to log in. This opens up opportunities for attackers to crack passwords simply by trying over and over again. This kind of attack is called brute-force, and Protect Login mitigates this by slowing down the login after a series of subsequent failed attempts. But we did not stop there. We’re also working on ways to improve the security of your WordPress passwords. Currently, we do this by allowing you to enforce a password policy to make sure your users don’t use weak passwords for their accounts.